CVE-2019-25618
Denial of Service via Oversized Input in AdminExpress
Publication date: 2026-03-22
Last updated on: 2026-03-22
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| adminexpress | adminexpress | to 1.2.5.485 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-73 | The product allows user input to control or influence paths or file names that are used in filesystem operations. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': 'CVE-2019-25618 is a denial of service vulnerability in AdminExpress version 1.2.5. It occurs in the System Compare feature where a local attacker can submit an oversized input buffer into the Folder Path field.'}, {'type': 'paragraph', 'content': "By pasting a large number of characters (for example, 5000 'A's) into this field and triggering the comparison function, the application becomes unresponsive or crashes."}, {'type': 'paragraph', 'content': 'This is likely caused by a buffer overflow due to improper handling of the input size.'}] [1, 2]
How can this vulnerability impact me? :
This vulnerability can cause the AdminExpress application to crash or become unresponsive, resulting in a denial of service condition.
An attacker with local access can exploit this by submitting oversized input to disrupt normal operation, potentially leading to downtime or loss of availability of the application.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'This vulnerability can be detected by attempting to reproduce the denial of service condition using the System Compare feature in AdminExpress 1.2.5. Specifically, an oversized input buffer (e.g., 5000 "A" characters) is submitted into the Folder Path field.'}, {'type': 'list_item', 'content': 'Open AdminExpress and navigate to the System Compare feature.'}, {'type': 'list_item', 'content': 'Paste a large buffer of characters (such as 5000 "A" characters) into the Folder Path field.'}, {'type': 'list_item', 'content': 'Click the scales icon next to the Folder Path input to trigger the comparison.'}, {'type': 'paragraph', 'content': 'If the application becomes unresponsive or crashes, the vulnerability is present.'}, {'type': 'paragraph', 'content': 'A proof-of-concept exploit script is available that generates the large payload buffer, which can be used to test the vulnerability.'}] [1]
What immediate steps should I take to mitigate this vulnerability?
I don't know